It depends to some extent on who has access to the machine where you wish to store the documents, and how sensitive the documents are. When you are storing very sensitive documents with severe access restrictions it can make sense to use the DB for storage. You have to be careful when writing the data in and reading it out, but it can be done. I recall implementing a document storage system in SQL Server a few years ago - you will see a lot of advice both ways but actually the filesystem and the db are both suitable for this. It really depends on what your requirements are. Mark -----Original Message----- From: Richard Lynch [mailto:ceo@xxxxxxxxx] Sent: 19 April 2005 03:27 To: Bosky, Dave Cc: php-general@xxxxxxxxxxxxx Subject: Re: mysql blob datatype for documents On Mon, April 18, 2005 5:40 am, Bosky, Dave said: > Would it be better to store uploaded pdf, word, or excel documents in > a MySql blob field rather than keeping them in a directory? > > I really want to secure the documents and limit document access to > specific users. It shouldn't be significantly easier to limit access with BLOBs than with actual files if your Security Model and Design is any good. And the penalties for using BLOBs to store these are legion. There is a custom super-fast souped up database storage software package specifically optimized for large chunks of data like this that you should be using. It's call "the file system" :-) -- Like Music? http://l-i-e.com/artists.htm -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php Gamma Global : Suppliers of HPCompaq, IBM, Acer, EPI, APC, Cyclades, D-Link, Cisco, Sun Microsystems, 3Com GAMMA GLOBAL (UK) LTD IS A RECOGNISED 'INVESTOR IN PEOPLE' AND AN 'ISO 9001 2000' REGISTERED COMPANY ********************************************************************** CONFIDENTIALITY NOTICE: This Email is confidential and may also be privileged. If you are not the intended recipient, please notify the sender IMMEDIATELY; you should not copy the email or use it for any purpose or disclose its contents to any other person. GENERAL STATEMENT: Any statements made, or intentions expressed in this communication may not necessarily reflect the view of Gamma Global (UK) Ltd. Be advised that no content herein may be held binding upon Gamma Global (UK) Ltd or any associated company unless confirmed by the issuance of a formal contractual document or Purchase Order, subject to our Terms and Conditions available from http://www.gammaglobal.com E&OE ********************************************************************** ********************************************************************** -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php